CVE

CVE-2021-24215

9.8

CVSS

Description

An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource.

Attack Vector

Privileges Req.

User Interaction

controlled admin access

Updated Sep 26, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24215 Scanner

CVE-2021-24215 scanner - Improper Access Control vulnerability in Controlled Admin Access plugin for WordPress

Used 2.2k times · 3.4k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: controlled admin access

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →